Expiring soft tokens

[JeffBrandt]

Hello All,

Looking for some clarification on the process around expiring soft tokens.

We have a number of soft tokens that are about to expire. Those distributed on the newest version can be extended and that seems to work well (no issue with those). However, those tokens that where distributed under the older version state that they must be re-distributed.

The question is....When you mark the token for re-distribution is the end user required to re-import their current token?  Once the token is marked for re-distribution the system will allow us to extend the token, but what will happen when the distribution link expires in 7 days?

Thank you.

[EdwardDavis · Accepted solution]

Re-distributed tokens immediately change the encryption schemes at the time they are redistributed, so those tokens must be reinstalled. The users old token copy becomes no longer good to authenticate. So, the user must install the new token to continue to authenticate. Links don't usually get 'stale' past 7 days for active users, because if they don't use the link to install the new copy of the token, they aren't going to be able to keep using the old token copy. If the link does get stale it'll have to be distributed again.